From b0ebc265a3dadae2e421c2e234a1d89944a97f25 Mon Sep 17 00:00:00 2001 From: Ruben Talstra Date: Sat, 5 Apr 2025 14:31:28 +0200 Subject: [PATCH] =?UTF-8?q?=F0=9F=94=A7=20docs:=20Add=20comments=20for=20s?= =?UTF-8?q?upported=20algorithms=20in=20openidStrategy.js?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- api/strategies/openidStrategy.js | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/api/strategies/openidStrategy.js b/api/strategies/openidStrategy.js index e5a7fc68ff..6304707b7f 100644 --- a/api/strategies/openidStrategy.js +++ b/api/strategies/openidStrategy.js @@ -195,6 +195,14 @@ async function setupOpenId() { const issuer = await Issuer.discover(process.env.OPENID_ISSUER); logger.info(`[openidStrategy] Discovered issuer: ${issuer.issuer}`); + /** + * Supported Algorithms, openid-client v5 doesn't set it automatically as discovered from server. + * - id_token_signed_response_alg // defaults to 'RS256' + * - request_object_signing_alg // defaults to 'RS256' + * - userinfo_signed_response_alg // not in v5 + * - introspection_signed_response_alg // not in v5 + * - authorization_signed_response_alg // not in v5 + */ /** @type {import('openid-client').ClientMetadata} */ const clientMetadata = { client_id: process.env.OPENID_CLIENT_ID,